$ rpki-client -vvf repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft File: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft (raw, json) Hash identifier: eGU2OX+76xJV+42l41ht4N4sLm573MgR7txuPPlb2lM= Subject key identifier: 48:1E:81:2A:DB:62:97:91:7C:CC:2D:8E:4E:8B:C7:B7:95:3E:E7:C6 Authority key identifier: EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 Certificate issuer: /CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Certificate serial: 08CD8B3DD819E50B70ECA11569EB269955AFC45A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft Manifest number: 0221 Signing time: Thu 26 Mar 2026 01:11:30 +0000 Manifest this update: Thu 26 Mar 2026 01:06:30 +0000 Manifest next update: Sun 29 Mar 2026 02:42:30 +0000 Files and hashes: 1: 3130332e3231392e3131322e302f32342d3234203d3e20313337333432.roa (hash: bSd7lFuLXvK7t89PrxW8ofWlYEOIMss9c7qTJsvJO80=) 2: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl (hash: C/eRVm0lEwvmEWO7D63wvRMCPX5CadSqQMEg49RxdgU=) 3: 323030313a6466323a336130303a3a2f34382d3438203d3e20313337333432.roa (hash: Sh/ySovraK/6CDGLCZn+KlD/GjLGpw2SU/yd9xmA9I4=) 4: 3130332e3131332e332e302f32342d3234203d3e20313337333432.roa (hash: a5r+evyHi4RcP5APmnZM1VFgptF4O6HvhFasr9olIfY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:cd:8b:3d:d8:19:e5:0b:70:ec:a1:15:69:eb:26:99:55:af:c4:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Validity Not Before: Mar 26 01:06:30 2026 GMT Not After : Mar 29 02:42:30 2026 GMT Subject: CN=481E812ADB6297917CCC2D8E4E8BC7B7953EE7C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:74:ca:6b:06:ab:84:3c:61:33:f7:6e:63:5e: 27:cb:fe:a9:12:ce:87:bb:ac:6d:f7:78:2c:fe:e3: f3:a4:44:c9:e4:e3:d0:aa:26:e9:fc:ae:05:b3:1f: ba:a5:c3:e2:36:73:02:bf:fb:26:52:86:c7:27:d1: 0d:ce:12:0f:c4:61:c2:63:86:46:6a:2a:ad:4d:5c: 06:68:bd:3a:0d:82:cf:06:8f:bf:16:08:1b:a0:a2: 45:69:89:db:48:a8:23:5e:9d:1f:38:f1:3b:17:50: 03:05:6e:f3:9a:17:8b:38:0f:0b:6e:de:de:32:bd: f1:44:c0:ed:4d:16:32:ee:f4:55:3b:8b:cd:c3:17: cb:9e:26:3c:d1:b3:43:59:c9:07:8a:ac:5c:af:a8: 2d:ee:bf:e1:f1:b2:49:f0:e5:20:2a:19:f6:c3:e5: 8f:2d:81:81:e6:a0:ac:5d:70:18:fc:f8:7e:ef:de: 7d:8f:10:23:ee:a4:81:ec:af:d2:20:66:18:e1:7a: 19:e2:de:8d:82:5b:dc:48:3b:9d:44:ed:8a:df:71: 82:38:9e:91:ec:00:48:ce:2e:7f:4f:4a:02:0b:00: 47:4c:f6:0e:3e:f4:6e:6c:4b:f1:2c:e1:85:85:f0: 17:96:3b:e0:3e:d8:63:fb:29:09:12:ac:00:22:d6: 39:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1E:81:2A:DB:62:97:91:7C:CC:2D:8E:4E:8B:C7:B7:95:3E:E7:C6 X509v3 Authority Key Identifier: keyid:EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:7c:69:8b:69:91:19:bf:a8:2d:f9:a1:b2:2b:ad:5a:f2:50: ac:b8:ba:49:09:39:19:f5:d5:4a:56:dc:f0:32:fc:72:fb:6e: ba:9d:66:da:e0:53:81:c2:ed:e5:84:a4:7d:37:88:31:8b:8e: 57:0c:02:b0:a4:0b:30:6f:4e:40:c2:00:87:6e:91:ce:3a:bc: 9f:a1:b3:3d:68:35:f1:43:01:df:43:37:25:1a:27:39:d9:a3: 7c:8e:d3:6b:34:29:42:d7:93:31:db:e8:48:00:4d:d1:17:80: 31:07:ea:23:87:c0:c1:be:99:4b:2c:d9:fb:e8:a7:33:fb:df: 57:f3:58:50:5a:60:93:26:99:e5:92:e9:f3:51:b6:87:6b:49: 2f:c4:6c:a1:33:51:68:98:32:54:8e:ea:58:b4:00:53:df:93: 2e:15:46:f8:fa:c4:27:05:d2:0d:92:3d:6b:38:55:9d:46:35: db:ef:81:0a:4f:92:95:d5:85:56:26:70:23:02:b1:97:25:f8: 3d:99:c7:9e:95:a7:12:09:86:8d:e8:d9:c0:b6:01:65:94:46: 41:18:ea:b2:e3:6f:78:12:7f:93:09:48:51:15:6b:53:ca:d3: 5d:d2:f6:26:a4:72:95:3c:14:1c:5e:18:a4:55:86:c8:9b:31: 50:51:5a:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCM2LPdgZ5Qtw7KEVaesmmVWvxFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRC Q0Q5RUEyNjAeFw0yNjAzMjYwMTA2MzBaFw0yNjAzMjkwMjQyMzBaMDMxMTAvBgNV BAMTKDQ4MUU4MTJBREI2Mjk3OTE3Q0NDMkQ4RTRFOEJDN0I3OTUzRUU3QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCudMprBquEPGEz925jXifL/qkS zoe7rG33eCz+4/OkRMnk49CqJun8rgWzH7qlw+I2cwK/+yZShscn0Q3OEg/EYcJj hkZqKq1NXAZovToNgs8Gj78WCBugokVpidtIqCNenR848TsXUAMFbvOaF4s4Dwtu 3t4yvfFEwO1NFjLu9FU7i83DF8ueJjzRs0NZyQeKrFyvqC3uv+Hxsknw5SAqGfbD 5Y8tgYHmoKxdcBj8+H7v3n2PECPupIHsr9IgZhjhehni3o2CW9xIO51E7YrfcYI4 npHsAEjOLn9PSgILAEdM9g4+9G5sS/Es4YWF8BeWO+A+2GP7KQkSrAAi1jnbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSB6BKttil5F8zC2OTovHt5U+58YwHwYDVR0j BBgwFoAU79IJGblvTjT6nkoMzCNHpLzZ6iYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWM0ODc1Ni1iNjYyLTQ2OGEtOTA2ZC02Y2Q0NjFjYjZlNDIvMC9FRkQyMDkxOUI5 NkY0RTM0RkE5RTRBMENDQzIzNDdBNEJDRDlFQTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRCQ0Q5 RUEyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFjNDg3NTYtYjY2Mi00NjhhLTkw NmQtNmNkNDYxY2I2ZTQyLzAvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3 QTRCQ0Q5RUEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABV8aYtpkRm/qC35obIrrVryUKy4ukkJORn1 1UpW3PAy/HL7brqdZtrgU4HC7eWEpH03iDGLjlcMArCkCzBvTkDCAIdukc46vJ+h sz1oNfFDAd9DNyUaJznZo3yO02s0KULXkzHb6EgATdEXgDEH6iOHwMG+mUss2fvo pzP731fzWFBaYJMmmeWS6fNRtodrSS/EbKEzUWiYMlSO6li0AFPfky4VRvj6xCcF 0g2SPWs4VZ1GNdvvgQpPkpXVhVYmcCMCsZcl+D2Zx56VpxIJho3o2cC2AWWURkEY 6rLjb3gSf5MJSFEVa1PK013S9iakcpU8FBxeGKRVhsibMVBRWg8= -----END CERTIFICATE-----Generated at Thu Mar 26 18:23:51 2026 by rpki-client